General

  • Target

    35121c04b3577a2c35bd6fb55f4051ec72cfae3221eb6e6b36e79d37fe99cb06

  • Size

    972KB

  • Sample

    221003-fp1nnsadbj

  • MD5

    61f0029aa1c264bd74331299a19ddf3f

  • SHA1

    4bb01a38eaa55794760053cb05bca7151a897284

  • SHA256

    35121c04b3577a2c35bd6fb55f4051ec72cfae3221eb6e6b36e79d37fe99cb06

  • SHA512

    8545450590370a4e0524f9e1b599a1bdb13bb15bf7fea48d3298fc1a0b6206152255d22c4387a6b2065b55574d614ccbfad411d80c73bcd61917c868b57bf57f

  • SSDEEP

    12288:3ZWtI6RkjXeZJys73dOvXDpNjNe8Nu9OFXeZJys73dOvXDpNjNe8NuCbiZKm4H8I:3uhajXeZJ8NI8pXeZJ8NI804HTFj

Score
10/10

Malware Config

Targets

    • Target

      35121c04b3577a2c35bd6fb55f4051ec72cfae3221eb6e6b36e79d37fe99cb06

    • Size

      972KB

    • MD5

      61f0029aa1c264bd74331299a19ddf3f

    • SHA1

      4bb01a38eaa55794760053cb05bca7151a897284

    • SHA256

      35121c04b3577a2c35bd6fb55f4051ec72cfae3221eb6e6b36e79d37fe99cb06

    • SHA512

      8545450590370a4e0524f9e1b599a1bdb13bb15bf7fea48d3298fc1a0b6206152255d22c4387a6b2065b55574d614ccbfad411d80c73bcd61917c868b57bf57f

    • SSDEEP

      12288:3ZWtI6RkjXeZJys73dOvXDpNjNe8Nu9OFXeZJys73dOvXDpNjNe8NuCbiZKm4H8I:3uhajXeZJ8NI8pXeZJ8NI804HTFj

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Executes dropped EXE

    • Sets file execution options in registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Replication Through Removable Media

1
T1091

Persistence

Hidden Files and Directories

2
T1158

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Hidden Files and Directories

2
T1158

Modify Registry

2
T1112

Lateral Movement

Replication Through Removable Media

1
T1091

Tasks